基于改进BN模型的网络切片安全部署方法

为了满足5G垂直用户对于网络切片部署时细粒度安全隔离需求，同时兼顾用户的隔离需求和提高资源利用率，提出了一种基于改进BN模型的网络切片安全部署方法。首先提出了一种双层BN模型的网络切片部署架构，基于SBA（service based architecture）设计了虚拟机容器的双层虚拟化架构，将网络切片根据其所属用户的隔离需求分配利益冲突类标签，基于改进的BN模型部署规则确定网络切片的隔离部署策略；然后将该部署方法建立为整数线性规划模型，并将部署成本作为目标函数，通过最小化目标函数实现低成本部署网络切片；最后使用遗传算法对该问题仿真求解。实验结果表明，该安全部署方法在满足网络切片安全隔离需求的前提下降低了部署成本。

Network slice security deployment method based on improved BN model

In order to meet the fine-grained security isolation requirements of 5G vertical users for network slicing deployment, while taking into account the isolation requirements of users and improving resource utilization, this paper proposed a network slicing security deployment method based on the improved BN model. Firstly, this paper proposed a dual-layer BN model network slicing deployment architecture, and designed a dual-layer virtualization architecture of virtual machine container based on SBA. It assigned conflict of interest labels to the network slicing according to the isolation requirements of users. It determined the isolation deployment strategy of network slice based on the improved BN model deployment rules. Then, it established the deployment method as an integer linear programming model, and took the deployment cost as the objective function. This model realized the low-cost deployment network slices by minimizing the objective function. Finally, this paper used genetic algorithm to solve the problem. The experimental results show that the proposed security deployment method can reduce the deployment cost on the premise of meeting the requirements of network slice security isolation.